DE FACTORISATIONE NUMERORUM I : 
IN PURSUIT OF THE ERYMANTHIAN BOAR 



FRANCESCO SICA 



Abstract. We introduce a novel glance at factoring. The technique broached here departs from 
any known (at least to the author) factoring method. In this paper, we show, given a product of 
two large primes N (a RSA modulus), how to select a multiplicative function ak (dependent on 
N) related to the sum of divisors function and produce a nontrivial small linear relation among 
exp(log e N) values of <Jk(n) for \n — N\ — C>(exp(log e N)), (subject to a plausible conjecture). The 
tools to achieve this don't go beyond classical analytic number theory, as known one hundred years 
ago. 
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1. Introduction 

The problem of quickly factoring large integers is central in cryptography and computational 
number theory. It is in fact a pity that no more effort has been deployed to investigate the problem 
of integer factorization, when in comparison the number of cryptographic protocols relying on the 
difficulty of factoring integers has exploded in the last decades. 

The current state of the art in factoring large integers N, the Number Field Sieve algorithm [21 [3], 
stems from the earlier Quadratic Sieve [8] and Continued Fraction [6]. We should also mention the 
Elliptic Curve Method (ECM) by H. Lenstra [I], which is particularly useful when iV has a small 
prime factor p. They are all probabilistic factoring algorithms. 

These algorithms have heuristic running times respectively 0(exp(c(log A^) 1 / 3 (log log iV) 2 / 3 )) , 
0(exp(c(logiV) 1 / 2 (loglog iV) 1 / 2 )) and 0(exp(c(logp) 1//2 (log logp) 1 / 2 )) , for some constant c (not 
always the same) . The first two strive to find nontrivial arithmetical relations of the form x 2 = y 2 
(mod N) (which lead to a nontrivial factor by computing gcd(A r , x + y)), whereas the third is a 
generalisation of Pollard's p — 1 method [7], involving computations in some elliptic curve group 
instead of Z/N. We should note, however, that there exist probabilistic algorithms with proved 
running time 0(exp((l + o(l))(log A^) 1 / 2 (log log iV) 1 / 2 )) [5J. As far as the author is aware, no 
such rigorous bound exists in the form 0(exp ((log A r ) c )) for c < 1/2. Similarly, no deterministic 
subexponential algorithm is currently known, the best one being Shank's square form factorization 
SQUFOF which runs in 0{N l / A+t ), or in 0{N l ^ +t ) on the Extended Riemann Hypothesis. 

In this work, given an arbitrary e > we look for nontrivial relations (with cq = 1, say) 

Cj a k (N + j) 

- exp(log e A r )<j<exp(log e N) 

which are negligibly small, where &k is a multiplicative function related to cr(n) = Y^d\n ^ anc ^ 
N is some number which we want to factor. If we then know the factorizations of all n + j for 
\j\ < exp(log e N) then we can recover a^N) and from there the factorization of N in polynomial 
time (if N = pq is the product of two primes). In other terms we produce a polynomial reduction 
from the problem of factoring N to the problem of factoring 0(exp(log e N)) integers around N. 
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For instance, recall that for N = pq with p ^ q primes, we have 

o-(jV) = 1 + N + p + q 

and hence the computation (or even a fair approximation) of c(N) yields the the sum p + q, 
which together with the product N = pq is sufficient to recover the factors. However, an absolute 
arithmetic function is too "coarse" and erratic to be computed by analytic means. We discovered 
that to find anything useful, we have to select an arithmetic function depending on N. This will 
be made explicit in Section [3j 

2. Notations 

This work borrows heavily from standard notations in analytic number theory and indeed a 
classical reference on the subject is the treatise of Davenport pQ. In particular, we will make liberal 
use of the O notation in Landau's as well as Vinogradov's form (<C). Hence, for instance 

f(u) = 0(g(u)) /(u)« 5 (u) 

means that g(u) > and \f(u)\/g(u) is bounded above (usually as u — > oo or u — > + , depending 
clearly on the context). Similarly, f(u) = o(g(u)) (resp. f(u) = Q(g(u))) means g(u) > and 
\f(u)\/g(u) goes to zero (resp. \f(u)\/g(u) is bounded below). Unless specified, the implied con- 
stants are absolute, as well as undisclosed positive quantities that we label ci,C2,.... Any sum 
such as 

]T a 2 bc 

abc=n 

is to be understood as taken over all positive integers a, b, c such that abc = n. We also define 



£/(«) = £/( 



. a) 
a\n ab=n 

so that for instance the number of divisors of n is Yld\n anc ^ ^ s sum °^ divisors Yl&n 

3. Choice of the Multiplicative Function cr fc 
Let k £ N>i be an integer. Define the multiplicative function 
(1) <r k {n)= Y, 4 /k 4 /k -dt\ 1)/k 

did,2— dk-i\n 

Let x be a primitive Dirichlet character to a modulus I. We have the Dirichlet series expansion 

n=l 



whenever > 2 — 1/k. Here L(s,x) is t ne usual Dirichlet L-function 



^(«,x) = £ 



n=l 



convergent (resp. absolutely convergent) for > (resp. 3ts > 1). 
Now let v E N {y > 2) to be defined later as a function of k alone, and 



fu(t) 



{l-ty- 1 o < * < i, 

t > 1. 



The Mellin transform of /„ is by definition the beta function 
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i> + s) 7 

hence by the inverse Mellin transform^, 



Call the right-hand side 

F ( x ) = ^°k(n)x{n)f v (-) = ^2a k (n)x(n) (l 



n<x n<x 

and note that 

P v (x) = x v - l F{x) = o k (n) X {n){x - n)"" 1 

n<x 

is a piecewise polynomial (given by a different expression between consecutive integers) of degree 
v — 1. 

4. Relation to Factoring 

We will see later in Section [7] how to relate calculations on the polynomial P v to values of a k (re) . 
In this section we suppose that N = pq is a product of two different primes (e.g. as in a RSA 
modulus). We derive how the computation of Cfc(iV) to within 0(N~ 2 ) can be used to factor N. 
Remark that 

01fc (p) = l + pi/*+p?/* + ...+p(*-i)/* 
and by multiplicativity (Jk(N) = (Jk(p)crk(q) = &k{p)&k{N /p). Define 

g (X) = (1 + X + X 2 + • • • + X fc - X )(l + iV 1 /^ 1 + jV 2 / fc X~ 2 + • • • + N (k-i)/k X -( k -V) 



so that <Jk(N) = g{p l l k ). Observe that 



fc-i 



g(X) = a ™ X ™ 

m=— (k— 1) 

where a m > (|m| < fc — 1) and given by polynomials in N l / k . Hence g is convex in (0, oo) and 
g"(X) > N x l k > 1 (if k > 3). Additionally, since g(X) = g{N l / k /X), we have g' (VWJkj = 0. It 
follows that 

(3) \rf(X)\>N- 1 if X i (\/iVV* - AT 1 , \/NW + iV" 1 ) . 

We derive from this estimation that if \g(Xi) - g(X 2 )\ < N~ 2 and X 1 ,X 2 > V N 1 / k + iV -1 , say 
then 

(4) \Xi-X 2 \<N- 2 N = N~ l . 

In order to fix notations let us suppose p is the greatest of the prime factors of N, so that p > s/N. 
Let y = a k (N) + 0(N- 2 ) = g(p 1/k ) + 0(iV~ 2 ). Define x > \fN T l k so that g(x) = y (note that 
without loss of generality, we can always suppose that y > g(VNV k ) and therefore such a value x 
exists and is unique). 



We will also use the notation / instead of 



i J instead of J 

O) 



c+ioo 



C — iOO 



(1) If VN 1 /* < p l l k < ViVVfc + l/N, define j = VN l / k . This case is highly improbable and 
can be excluded a priori by a quick computation (see below). 

(2) If p 1 /* > ViVVfc + 1/iV we can suppose that y > g(\ / N 1 / k + 1/JV) since otherwise again 

is a better approximation to <7fc(JV). Therefore x > V A^ 1 /^ + 1/JV. Hence, 
by virtue of © and flU), x = p 1/fe + 0(JV _1 ). Note that in this dichotomy argument 

can produce in 0(log JV) steps a value j: = x + 0(A^ _1 ). 

In all cases, we end up with 

p i/k =P + o(iV- 1 ) . 
We will assume henceforth in the paper, that k = o(log N/ log log JV). We have 

N i/k_ p i/k > JLip_ 



and hence 



Therefore, 



p 1/k + O (1) < JV 1 ^ • 



p = ( ? + o(Jv^)) fc = P fc + o + E (*) ° (^) = ? fc + o(^" 1/(2fc) ) + o^- 1 ) 



n=2 

Note that since these last error terms are o(l) we get p = [jc k ~\ (the nearest integer to Remark 
also that in the improbable first case that p 1 ^ be exceptionally close to this can be revealed 

immediately by checking if p is the integer nearest to y/N. The next task is write P v {x) in a different 
way. 

5. Functional Equation of the Dirichlet L-Functions 

The Dirichlet L-function of a primitive character \ °f modulus I > 1 is an entire function 
satisfying the functional equation (given here in asymmetric form) 

Hs, X) = ^~ (j-) ' r W^ 1 " S W ~ s ' *) ( eW2 " X(-I)e"^ /2 ) , 
where r(x) is the Gauss sum 

e 

m=l 

6. A New Expression for P u {x) 

A standard "integration line moving" (to 3ft s = — 1 /2) argument in the integral of ([2]) will get us 
to the following. 

F(x) = L(0, X )---L(-(k-l)/k, X ) + ^- ( n^-p^)S /(fe 

*(-l/2) m= ° 

We should note here that the moving the line of integration to the line = —1/2 is by no means 
automatic here, and can be rigorously justified provided v is sufficiently large. For if s = a + it 
with a, t G R it can be recovered from the functional equation and Stirling's formula for T that 

\L(s,x)\ < \£t\ 1/2 ~ a as|i|^oo, 
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for a < C0. In particular, L{s - m/k,x) <-i \t\ 1+m/k < \t\ 2 for m = 0, . . . , k - 1 and a > -1/2, 
from which we deduce that the line moving argument to = —1/2 is justified provided, say, 

(5) v > 6k , 

which we will suppose from now on. 

The integral in the previous expression is the focus of our investigation. It is very natural at this 
point to use the functional equation. We get quite straightforwardly 



(-1/2) m ~° r ~° 

I {n^- + p*)r(i-. + ?)}^j((^)*.) 



(-1/2) m=0 



ni ^ V 2ni J V 2vr / V £ J 

/ { g i(s + ? ,, )r(s + 5)} _£(^( ( | e w^ I )- (is 



(3/2) m ~° 

where we have last performed the change of variables s — >• 1 — s and 

Co = exp(-ivr(A; - l)/4) , C fc = -x(-l) fe exp(ivr(fc - l)/4) , 

U)0 = 1 , LO k = -\ . 

Otherwise |C r | < 2 fc and 

2 

b r <1- - , 0<r<A;. 
fe 

We have singled out the extremal terms with r = l,2 k since they will lead to the crucial (and 
most difficult) series to evaluate. The other terms do not actually constitute a problem. Let us 
now turn our attention to a typical integral in the last sum, of the form 



(3/2) 

Notice that 



, , v m=0 \ ' / \ / 



I> + l-s) 
by ([!]). Therefore we get 



rwrfi- s ) 

1 (S — Z/j (COS 7T^ — COt 7TS Sill 7TZ/J = 1 (S — V) , 



2 Lindelof's conjecture asserts that the same should be true (up to |i| e ) for a < 1/2. This conjecture is still open 
at the moment. It is know to be a consequence of the Generalized Riemann Hypothesis for L(s, x) which asserts that 
L(s, x) — and < a < 1 implies a = 1/2. 
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h I {n'(^.«) r (^)},^i((Mf* 

(3/2) m ~° 

± J i(s , X ) { n i(s + =, x )r( s + ? )}r( s -,)((| e -/ 2) ^- ds 



By our choice of u, this integral is absolutely convergent. Furthermore, since the L-functions on 
Sis = 3/2 are all absolutely convergent, we can replace the product of L-functions in the integrand 
by their Dirichlet series expansion, interchange summation and integration, so that we are reduced 
to considering terms, for y = {^j-e llTU ' r / 2 ) k xn with n € N, of the form 

— / r(s-u)f\T(s + ^)y-ds = ^- [ T\T(s + ^) 1 fL - ds 

2m J V ^ k > 2m J *-} n \ k J (s - v) ■ ■ ■ (s - 1) 

(3/2) m_1 (3/2) m ~° 

= (fcO^U, / r (fa) ( f»7 d. 

2m J [s — v) ■ ■ ■ (s — 1J 



(3/2) 



. fc-1 1 
(2tt) — /c2 I 



where we have used repeatedly the functional equation T(s + l)/s = T(s), as well as Gauss' 
multiplication formula for the Gamma function 

r(s)r ( s+ D"' r ( s+ n^) = ( 2 ^ k ^ ks nks) . 

Let us suppose at first that y > is real. We can then move the line of integration in / from 
Sis = 3/2 to Us = v + 1 and get 

where the "widehat" notation means that the term corresponding to r = m is skipped. Let us 
name I the second addend and 

,*..M-r_ 1 f 1 1 \ (k k y)-^ 



1 = (k K y) v X = / T(ks) - v . ds . 

y yj 2m J y 1 (s - v) ■ ■ ■ (s - 1) 

(!+") 

d u X 

The z^-th derivative — — of the latter integral equals 
dy v 6 H 

(7) J T(ks)(k k y)-Us = t}Z^ e -^ f 

(1+") 

since there is no problem in differentiating under the integral sign if y > 0. To get back X we note 
that the right-hand side of ([7]) can be integrated back v times with elementary functions. We add 
a word of explanation about the constant of integration, which has to be set to zero at each step, 
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because 



lim — - / T(ks) K y) ds = , VO < m < v . 

dy m J (s-v)---(s-l) 



We work out these steps in an example with v = 2 and k = 3 (at this point, it is irrelevant to 
use (J5J) , as we are assuming y > so the integrand is always decreasing exponentially along vertical 
lines) . We then want to compute 

J_ f r(3 .) W-'-" - a = 120 + — / rp.) ; (27 " > :'" 2 ' ; * ■ 

2vri 7 v ; (s-2)(s-l) 2vri y v ; (s-2)(s-l) 

(3/2) (3) 

The second derivative of the right-hand term is 

— [ r(3s) (27y)- s (is = 243e" 3?/1/3 . 

27tz y 

(3) 

Therefore 

27 /"^^ (27y)-( s - x ) 

~27Ti 



J r(3s) (?ZgL! ^ ds = 243 y e~ 3yl/3 dy + C = 243 ^3 ^ e" 3 V duj + C" 



2 13 ! e~ 3 V + ?e~ 3u n + \e~ 3u \+C 



(3) 



with u = y 1 / 3 . Now taking the limit on both sides as y — > oo we get that C = 0. Another round of 
integration will give 



as j r ( 3 ») (s - 2)(» - 1) * = - 243 y e - + r - + r * + c 



(3) 



-729 / e~ 3 V + |e" 3 V + ^e" 3 V du + C 
3 9 



= 3e" 3u (81u 4 + 162u 3 + 180u 2 + 120u + 40) + C . 
By the same argument as above, here too C = 0, so that in the end 

— [ T(3s) / 27y ^ (B 2 \ = 3e~ 3 ^ 1/3 (81y 4 / 3 + 162y + 180y 2 / 3 + UOy 1 / 3 + 40) + 120 . 
2-7TZ J (s — 2)(s — 1) 

(3/2) 

In general, it is not hard to see that / can be always given in closed form as a function of y, in 
the shape 

(8) 2s / r(ts) (.-iffii-D d "''jikr M 1/l >»~ %1 " + 

(3/2) 

where pk^ v {X) and qk tU (X) are polynomials with leading terms respectively 

(9) tUx^-V" and (-l)--£i^-fcfc(-2)^-2 

fe (1/ — 2)! 
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It should be noted that the result was derived for a real valued X = y l l k and we need it for 
X = y x l k = je ! ™ r / 2 (ra) 1 /' : where \uj r \ < 1. In other words, we have proved 

(3/2) 

for X > and need to extend it to the positive half-plane > (up to the boundary, possibly 
excluding X = 0). This can be achieved by analytic continuation, by noticing that each expression 
is analytic in > and continuous up to the border $tX = (possibly excluding X = 0), and 
therefore we have equality throughout this region. 

We will now bound the coefficients of pk tU more closely. We have 

x= PkAv 1,k ) 

(k k y) u 

Writing a partial sum decomposition 

1 K 

(s — u) ■ ■ ■ (s — 1) s — u 

\ / \ / u=l 

Z = V^^- / T(tc) (^)~ (S ~ M) dc 
4^ (k k y) u 2m J v ' [s - u) 

(l+u) 

As before, the derivative d/dy of the last integral (times I /2m) will equal 

{k k y) u c _ ky i/ k 
ky 

and after integrating this last expression (substituting t = y k and then by parts ku — 1 times) we 
arrive at the result 

(io) x = e - k y 1/k 

11 ku-1 1 (ku-l)---(ku-(u-l)) 1 (fcu-1)! 1 



we get 



V 

X 

tt=l 



E / 1 1 fi,'U, — 1 1 ^«7U — !)■■■ [KU — \V — i.)) 1 

u \ hTJJk ^ Vi Talk ^ 1 ~u> T^Jk ^ 



kyi/k k 2 y 2 / k ' k u y v l k k ku y u 

v ku „ 

u=l m=l y 

with 

(/sit — 1) • • • (Aru — (m — 1)) 
-r m ,M = ^ • 

Note that after summing over u, the first nonzero power of y in the sum is y~ u / k . Let 

fe-i 



m=0 n>l 

where 

« n = ^ 1/ ^ 2 " 2A ---^r 1)A 

cZl---cZfc_l|ra 

Note that 

(11) |a n |<2 fe n 3 



as can be inferred from the inverse Mellin expression 

*(*) = £ a m x(m)(x - m )4/n4 + ^) (* + l)(« + 2) ds « C(2) ^ 

m<x 171=0 

and 

a„x(n) = 2 ($(n + 3/4) - $(n + 1/4) - $(n - 1/4) + $(n - 3/4)) . 
Then we deduce the following expression for P u (x) = x u ~ l F(x): 

(12) 

P v (x) = x^L(0, X ) • • • L(-(k - I) IK X)+£CV 1» (^pj " (^j ^ 1)12 (^e"^/ 2 ) \ 

\u=l m=^ \ / n>l 



m=2 Ur=l {m-r) \ ' / n >x 

7. Choosing Small Linear Combinations of the a k (N + j) 

It is actually quite a challenging task that of finding an approximation of all the inner series 
of (|13p . However, an easier task consists in relating the values of Uk{ n ) f° r \n — N\ < J for some 
small enough J by finding a linear combination 

£ C j( r k (N + j)x(N + j) , 
-J<j<J 

which equals a negligible quantity, for suitable Cj S C, not all zero. This will relate the problem 
of factoring N to the problem of factoring N + j for \j\ < J, which is often easier. 
In the following, let x = N. The idea here is to consider linear combinations 

CjP u (x + j) 

-J<j<J 

and impose that the unknowns Cj's satisfy (polynomially many) homogeneous linear equations. 
Since we can scale these solutions, we will also assume that max|cj| = 1. If we insure that J is 
larger than this number of equations, there will exist a solution not identically zero and this will 
give what we want. 
We can write 



E E E (-^(V) 



-J<3<J 0<m<v-l 0<h<v-l-m 



v — l\ ( v — 1 — h 

m 



X E E f" 1 -^^ ) <?k{n) X (n)n h , 

n<x+J \j<x—n 



and therefore imposing the v linear conditions 

(15) i kc i = ° ' h = 0,...,u-l 

-J<j<J 
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will insure that the sum on the re's in the right-hand side will actually be supported on x — J < 
n < x + J . Put it otherwise, for those cj's satisfying (|15p . we have 

(16) Yl CjP u (x + j)= Cja k (x + j) X (x + j) 

-J<j<J -J<j<J 

where 

(17) Ci = - J)"" 1 , 

being understood that c L = if l ^ [— J, J]. We will take, given any e > 0, 

J = x 5 , 

(log x) 1_e ' 
fc = 2, 

z,= [(logx) 1 - e / 2 ] 

£ = largest prime < x 1 ^ 

In particular, we will get a linear relation among 2J = 0(exp(log e N)) terms close to N. 

It is the inner series (which we call the singular series) in ()13|) which present the greatest challenge. 
We will see that taking appropriate linear combinations as above will allow us to discard the 
contribution of these series into a small error term. 

We now make a conjecture on the size of Co, for random coefficients Cj satisfying (|15p . (|19p and 
the following: 



(18) Cj = , \j\ < J/logx . 

Conjecture 1. In (I17p . Co = £1 (J V//2 ) for a random choice of c L satisfying all the necessary linear 
equations ( (|15p . f 1 1 8 [) and ()19p ). with max|cj = 1. (Note: We could replace it with the weaker 
statement that Co = £l{J 6u ) for some 9 > 0.) 

The reason to impose (1181) comes from the fact that we believe the Cj with smallest \j\ will be 
biggest and then decay as \j\ increases, as (I15p seems to indicate. This is probably not necessary. 

We then see from ([To]) that computing Yl~j<j<j CjP u (x + j) with an error term 0(x Su ^ 3 ) = 
O (J v l 2 x- 2 ) will lead, if we know the values Uk{x + j) for j G {—J, J],j ^ 0, to the determination of 
o~k(N) with error term 0(N~ 2 ) and hence the factorisation of N, as we have seen (in doing this, we 
may take % to be the quadratic character mod £, so that x(iV) = ±1 and can be easily computed, 
although not necessary here, since one can try the possible two values). We are left to compute 
^2-j<_j<j c jPv( x + j) with an error term 0(x Su ^ 2 ). Let us call c = v/k. Our present choice, as we 
have seen, is to let c = [(log x) l ~ e / 2 \/2, but we keep it open, for future different choices. Define also 

(i-a/4)i/ 
X = x c 
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The first point is to approximate the singular series in (|13p for P u (x+j) by dropping the contribution 
of all n > X. The error term so obtained is, for an appropriate (and explicit) absolute constant A, 



v ku , „ v m 

« # m c + ,r E m E {^w) ^ E ^ 

u=l m=u v v J ' ' n>X 
fei/ 



< 2- 1» *v 2 (2H m Yl zjr, 



m=v n>X 

nx=v m=v 

<_ wrwM £ <- W*mM E »r 

Tfl=V 

kv 



x (l—5/A)m — \ J \ ) / j x Sm/l2 



< (2A) fe 2^ r(i/) x^ /3 £^ 2 (2H^ 9 x~ (log:r)£/2/12 < x^x" 1 . 

Therefore, the contribution of terms with n > X in the singular series of Yl-j<j<j c j^( x + j) ^ s 
< Jx 5u / 3 /x < x^/ 3 . 

Secondly, we use a dichotomy argument and write xi for the smallest j > — J and — x a = 
[log 3 x] if q > 1. We thus get a partition of [— J, J] as a union of intervals of the form [x a , x a+ i). 
We adjust this partition so that the right-most interval has length at least [log 3 x] and at most 
2[log 3 x], by merging it with its adjacent interval (i.e., if J € [x a+ i,x a+ 2) we redefine x a+ \ = [J]). 
Note that the number of such a's is 0(J/ log 3 x). If x a < x + j < x a+ \, we write x + j = x a + h 
(hence h < 2 log 3 x). Express in ()13|) with n < X, 

( 2irke i7TU > r / 2 ((x + j)n) 1 / k \ ( 2nke i7TU ' r / 2 (x a n) 1 / k \ 
ex P 2 = exp 



x exp 



and note that the argument of the second exponential is 

*((* a + *)V*-*i/*)xV* h 



<C^xfe _i+i 4 k <^hx 4(i°g*) 1 - e = — — - = o(l) . 

/ log X N 

exp 



t I loj 

C\ I") I 

This means that we can approximate this exponential to within 0(exp(— log 2 x)) by replacing it 
with a truncated Maclaurin series 



[log 2 *] 1 / 2 7 rke i ^/ 2 ((x a + h) l l k - x l J k ^j n 1 '^ 



li=0 " 
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Summing up, if we denote c a ^ = Cj for the coefficient corresponding to x + j = x a + h, we see 
that using (fT2|h J2-.j<j<j ■CjP v (x + j) can be rewritten as 

Y! c a ,hPAx a + h) = Y, Y! c a , h (x a + hy- 1 L(0, X )---L(-(k-l)/k,x) 

a 0<h<[log 3 a;] a 0<h<[log 3 x] 

r=0 

A, f £e- i7TUJ ^ 2 Y l , N exp(-2^e^''/ 2 (x a n) 1 / fc /^ 

M=l m=i/ \ / n<X a 

1 / 2nke i ™r/ 2 n 1 / k Y , , 



^=0 \ / 0</i<[log 3 x] 

r(/cm) / 2vr/c j7TUlr/2 \ ~ km sr^ a n x(n) 



^ J'?k ^ E^E E' *r- +° 



<5^/3 



m=2 H r=1 {rn-r) \ / n < x Q o<h<[log 3 x] 

where Y^' means that corresponding to the largest value of x a < J, the parameter h runs in an 
interval of length between log 3 x and 2 log 3 x. Note that because of (|15p . we have 

Y E Ca,h(x a + h) m = , m = 0,...,i/-l 

a 0<h<[log 3 a;] 

and therefore 



E E ^fe + M-rw^lE^^ 2 

a 0<fe<[log 3 a;] r=0 

A, /^ e -^/2\ m exp(-27rfce i ™''/ 2 (£ a n) 1 /fc/f) 
2tt ^, u ^^a n x(n) 

u=l m=u \ / n<X a 



M=0 » 



/ 0</i<[log 3 x] / 



At this point we see that if we impose the linear conditions 
(19) 

£' ^ ((x Q + hfl k - x l J k Y (x a + hy-™/ k = 0, (p = 0, . . . , [log 2 x]), (m = 1/, . . . , kv), 



0</i<[log 3 x] 

we will obtain that 



E E C a,hP»(x a + h) = 



Sv/3 



a 0<h<[log 3 x] 

which is what we want. We can remark that the number of variables c a ^ is O(J), while the number 
of homogeneous linear equations that we impose on them ( (fTo"j) . (fTSj) and CEHD) is 

< i/ + + {#a)ki> log 2 a; < log x + —— + (#a) log 3 " e/2 x < 



logx " ' logx ' (logx) 6 / 2 

and therefore we can find solutions which are not identically zero. 
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Remark : One may wonder what the limit of this method is. We believe that actually one should 
be able to bring the linear relation down to J = [log 3+<E N] terms. This will be made clear in future 
versions. 

Remark : We changed the setting a little from the last version of this work, because we realized 
that Conjecture [1] does not hold if c is too small, for the following reason: in (|19p . taking /j, = 0, 
we see that we have 

c a ^ h (x a + h) m = , m = 0, . . . ,v - c. 

0</i<[log 3 x] 

By using Leibniz' rule and induction, this implies that 

(20) Y! c a,hh m = , m = 0, . . . , v - c. 

0</i<[log 3 x] 

Writing as before x + j = x a + h and calling J a = x a — x, we see that 

a: J a >0 0<h<[log 3 a;] 

Then, from (|20p . we can deduce, by Leibniz' rule again, that 

E' c^hiJa + hy-^ Y E' c^-^^c^iog^j^iogx) 31 - . 

0</i<[log 3 x] m<c-2 V y 0<h<[log 3 a;] 

Therefore, the choice of c cannot be made too small if we want C = £l{J ev ) for some 9 > 0. 
However, there is no apparent reason that would make > c„ hh m small for m > v — c 

' ^ K ^ 0<h<[log 3 x] ' 

(when max \ c a ^\ = 1), although at the moment we are unable to show this. 
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